Oracle plan to change the way that Java is licenced. This will impose a requirement to survey estates for targets which are running Java. While a change request has been submitted to add reporting of Java version/edition in to iQSonar, as a temporary work around we can use the RestAPI to find scanned devices which report Java as part of their installed_applications.
The following PowerShell script is provided as is - the end user is expected to change the three variables at the top of the file to reflect their own iQSonar installation, and run the script in a PowerShell window on their iQSonar host.
Find Java
#
# We need to find devices which have Java installed on them
#
# The RestAPI uses HTTP authentication. Set $user and $pass to the username and password needed for your iQSonar instance
# set the $host to the IPAddress, name or FQDN of the iQSonar server
$user = "admin"
$pass = "password"
$sonar = "Your iQSonar Host"
$secpass = ConvertTo-SecureString $pass -AsPlainText -Force
$credential = New-Object System.Management.Automation.PSCredential($user,$secpass)
#
# To find out how many devices there are, ask for the first device and look at the header for the device count
# offset=1 means start with first device. fetch_size=1 means only return one record.
$uri = -join ("http://", $sonar, "/api/v1/devices/?offset=1&fetch_size=1")
$r = Invoke-WebRequest $uri -Credential $credential
# $r.headers has HTML headers, $r.content has text content
$deviceCount = $r.headers.'X-fetch-count'
$fs = 100 # fetch_size - change this up or down depending on the size of your estate and how much RAM your server has.
$offset = 1 # offset
$seen = 1; # first offset is 1, not 0
while ( $seen -lt $devicecount)
{
# Outer loop, grab a batch (defined by fetch_size) of devices
$url = -join ("http://", $sonar, "/api/v1/devices/?offset=", $offset, "&fetch_size=", $fs)
$devices = Invoke-RestMethod $url -Credential $credential
$i = 1
while ($i -lt $devices.count)
{
# inner loop - process individual devices in this batch
$GotJava = 0;
$thisDevice = $devices[$i]
$thisSoftware = -join($thisDevice.self, "/installed_software/")
$currSoftware = Invoke-RestMethod $thisSoftware -Credential $credential
if ($currSoftware.count -gt 0)
{
$j=0;
$devOutput = -join( $thisDevice.host_name, $thisDevice.":")
while ($j -lt $currSoftware.count)
{
$app = $currSoftware[$j];
if ( ($app.name -like '*java*') -or
($app.name -like '*jre*') -or
($app.name -like '*jdk*') )
{
$devOutput = -join ($devOutput, "`r`n ", $app.name)
$GotJava = $GotJava + 1
}
$j = $j + 1
}
}
if ($GotJava)
{
write-host $devOutput
}
$i = $i + 1; # keep track for inner loop
$seen = $seen + 1; # keep track for outer loop
# debugging -- used if we need feedback for the user
# if ( $seen % 10 -eq 0) {
# progress indicator - display a "." every 10 devices
# write-host "$seen"
# }
}
# Finished this batch
$offset = $seen
}